NetSight
critical9.8

CVE-2019-14080

Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon …

Impact

Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, Kamorta, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS605, QM215, Rennell, SA415M, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SXR1130

Affected products

VendorProductAffected versions
QualcommApq8053 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommKamorta Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMsm8905 Firmware
All versions
QualcommMsm8909 Firmware
All versions
QualcommMsm8917 Firmware
All versions
QualcommMsm8920 Firmware
All versions
QualcommMsm8937 Firmware
All versions
QualcommMsm8940 Firmware
All versions

Weakness classification

References